FirstTry
GSECGIAC Security Essentials

Practice Exam 2

5 of this form’s 106 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    defensible-architecture-segmentationDefense in Depth and Defensible Network Architecture

    An organization keeps subdividing its environment into ever smaller segments. Which risk does the guidance name?

  2. Question 2 of 5

    cryptography-password-based-key-derivationCryptography

    An analyst asks why a salt is stored in the clear alongside a derived key. What does RFC 8018 say the salt is for?

  3. Question 3 of 5

    access-control-entra-password-protectionAccess Control and Password Management

    A team asks what edit distance the fuzzy matcher uses when comparing a normalized password against the banned lists.

  4. Question 4 of 5

    windows-security-uac-elevation-surfaceWindows Security

    A team asks how malware could reach a machine to imitate a prompt at all. What does the elevation design guarantee about installation?

  5. Question 5 of 5

    incident-handling-cloudtrailIncident Handling and Response

    An analyst investigating a data theft finds no record of the GetObject calls on a bucket, although the trail was enabled throughout. What explains that?

0 of 106 completed

0%

The other 101 questions are the rest of this form: same 240 minute clock, same 72 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 2 of 2 on GSEC.

What this exam covers

  • Defense in Depth and Defensible Network Architecture21 questions / 20% of the exam
  • Cryptography16 questions / 15% of the exam
  • Access Control and Password Management16 questions / 15% of the exam
  • Linux Security16 questions / 15% of the exam
  • Windows Security21 questions / 20% of the exam
  • Incident Handling and Response16 questions / 15% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.